chore(ci): harden GitHub Workflow permissions (#2985)

Signed-off-by: Alex Low <[email protected]>
hyperium · Sep 19, 2022 · 9a02774 · 9a02774
1 parent 23a5600
commit 9a02774
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
@@ -8,6 +8,9 @@ on:
 env:
   RUST_BACKTRACE: 1
 
+permissions:
+  contents: read # to fetch code (actions/checkout)
+
 jobs:
   ci-pass:
     name: CI is green